Google Search Console

• Risk level: Low
• Analyzed: May 1, 2026, 6:54 AM
• Findings: 1
• Version: 0.1.0

Overview

This is a mostly instructional Google Search Console analysis guide, with a minor note that API use may involve account-scoped Search Console data even though no credential requirement is declared.

This skill appears safe to install as an instructional Search Console helper. If you use it with live GSC data or API access, make sure the agent only accesses the intended Google property and avoid sharing exported search analytics unless appropriate.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI03: Identity and Privilege Abuse

Note

What this means

If connected to a Google account or Search Console property, the agent may be able to read private search analytics for that site.

Why it was flagged

Using the Google Search Console API normally involves access to account- or property-scoped search performance data. This is aligned with the skill's purpose, but the supplied registry metadata declares no primary credential or required env vars, so users should be aware authorization may still be needed.

Skill content

"When the user wants to analyze Google Search Console data, use GSC API" and "API: searchanalytics.query for programmatic access"

Recommendation

Only authorize access to the specific Search Console properties needed for the task, and review any API-based data export before sharing it.